Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: idQ+NOQm44Z+NGjiMHtHJpaGw6sos2dDTjcoeEY8O9k=
Subject key identifier: B9:AF:11:5F:3A:21:23:16:56:E1:C7:39:E0:54:81:E7:5C:8C:50:04
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 01A0DCF2484C1EE2D89D8E7EBD3D9861B04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 09:01:00 +0000
Manifest this update: Sat 26 Sep 2026 09:01:00 +0000
Manifest next update: Sun 27 Sep 2026 09:01:00 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: XP6cxp/mK8jGg1u5S3z8m/aAEHOwHBM6myRdrNDM/1w=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:48:4c:1e:e2:d8:9d:8e:7e:bd:3d:98:61:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Sep 26 09:01:00 2026 GMT
Not After : Sep 27 09:01:00 2026 GMT
Subject: CN=b9af115f3a21231656e1c739e05481e75c8c5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:2f:dc:66:58:c5:b2:ce:e3:fa:50:4d:26:
78:cf:cc:7c:e4:30:17:ab:8f:27:db:ae:3e:8c:29:
48:75:5a:56:bc:b8:4c:84:d6:3c:de:e6:1d:ae:b6:
e1:db:25:83:b0:64:6f:bc:c6:d4:a4:10:68:bf:2a:
be:42:11:69:93:e4:ef:49:d8:f3:9e:91:ab:7d:7a:
ba:bb:c3:ac:f1:21:fb:c0:c2:e3:43:0b:8e:b8:18:
30:13:72:53:f4:ea:51:c5:dc:2c:92:fd:68:9a:96:
8f:eb:a8:8c:c3:79:7d:ff:57:6e:7a:98:35:76:d4:
37:a8:3e:0c:7c:a8:aa:ac:d0:8f:cb:5e:05:b0:bc:
41:c2:53:88:6b:fb:cc:7e:7e:4f:42:a2:36:46:bd:
92:ac:3e:cc:48:c0:f6:ef:b2:d8:4e:d9:20:04:17:
2b:3f:0c:83:1a:e2:42:e9:3d:37:7e:ba:6e:6b:4a:
64:16:9e:82:85:59:b4:d3:64:4f:18:74:5f:46:a9:
15:5b:32:f4:c8:fe:11:38:72:d5:43:cb:0a:d8:9f:
87:d1:a9:95:ff:2c:0c:2a:37:31:cd:d5:b4:de:67:
e1:df:03:9e:63:a9:5a:1e:2a:3e:3d:4a:26:d7:ff:
0e:d5:d9:36:f5:29:a0:17:cf:77:6f:26:e6:f2:24:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AF:11:5F:3A:21:23:16:56:E1:C7:39:E0:54:81:E7:5C:8C:50:04
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a4:e3:2e:0c:3d:ff:44:fe:ca:02:e7:6d:da:3b:ba:89:0e:
34:05:cb:c8:29:6c:66:c7:3a:54:b3:bb:f2:7e:01:29:31:3d:
a1:6c:82:4d:69:dd:66:23:63:c1:fc:38:2f:32:c6:12:62:cc:
80:94:4c:9f:20:43:77:e0:bc:fa:53:f9:3b:d8:16:c2:e6:9b:
04:61:ee:1c:bd:aa:cb:ec:83:f4:1c:91:85:7e:63:e7:f0:59:
ef:b5:23:eb:2e:ad:a1:c6:61:24:dd:c2:4a:d5:b0:a2:24:59:
cf:19:45:f9:01:a0:45:72:d9:e0:09:f1:7b:ed:1d:39:b1:32:
29:c0:73:3e:de:1d:4e:c4:af:bb:1c:b0:2f:d5:53:0e:07:cc:
97:e1:b0:4e:c1:c4:02:60:79:a6:78:8c:41:e6:dd:78:ae:64:
a6:0a:78:e4:8e:bc:e4:57:35:5c:57:4f:56:b8:47:e3:d7:b3:
a7:8c:60:01:49:c9:72:cb:c0:73:57:a9:c5:0d:d4:78:53:bb:
b5:1e:21:35:70:d4:05:5e:d4:f4:e7:26:a8:e0:56:05:b2:33:
9e:e6:09:74:5a:cd:8b:ec:7b:99:da:bd:af:33:7f:76:55:09:
08:5c:a6:c6:35:eb:d5:cc:67:16:58:5c:4d:25:2d:3a:de:04:
a8:d1:dd:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8khMHuLYnY5+vT2YYbBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy
NGQ0YzkwHhcNMjYwOTI2MDkwMTAwWhcNMjYwOTI3MDkwMTAwWjAzMTEwLwYDVQQD
EyhiOWFmMTE1ZjNhMjEyMzE2NTZlMWM3MzllMDU0ODFlNzVjOGM1MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgv3GZYxbLO4/pQTSZ4z8x85DAX
q48n264+jClIdVpWvLhMhNY83uYdrrbh2yWDsGRvvMbUpBBovyq+QhFpk+TvSdjz
npGrfXq6u8Os8SH7wMLjQwuOuBgwE3JT9OpRxdwskv1ompaP66iMw3l9/1duepg1
dtQ3qD4MfKiqrNCPy14FsLxBwlOIa/vMfn5PQqI2Rr2SrD7MSMD277LYTtkgBBcr
PwyDGuJC6T03frpua0pkFp6ChVm002RPGHRfRqkVWzL0yP4ROHLVQ8sK2J+H0amV
/ywMKjcxzdW03mfh3wOeY6laHio+PUom1/8O1dk29SmgF893bybm8iTsjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmvEV86ISMWVuHHOeBUgedcjFAEMB8GA1UdIwQY
MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt
YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0
LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaTjLgw9
/0T+ygLnbdo7uokONAXLyClsZsc6VLO78n4BKTE9oWyCTWndZiNjwfw4LzLGEmLM
gJRMnyBDd+C8+lP5O9gWwuabBGHuHL2qy+yD9ByRhX5j5/BZ77Uj6y6tocZhJN3C
StWwoiRZzxlF+QGgRXLZ4Anxe+0dObEyKcBzPt4dTsSvuxywL9VTDgfMl+GwTsHE
AmB5pniMQebdeK5kpgp45I685Fc1XFdPVrhH49ezp4xgAUnJcsvAc1epxQ3UeFO7
tR4hNXDUBV7U9OcmqOBWBbIznuYJdFrNi+x7mdq9rzN/dlUJCFymxjXr1cxnFlhc
TSUtOt4EqNHdIw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:59:08 2026 by rpki-client